How do I send carbon black logs to sentinel without S3 bucket

[philipbrinkSA]

How do I send carbon black logs to sentinel without S3 bucket

[#2]

@philipbrinkSA you could go down the road of building a logstash forwarder with the carbon black plugin

See documentation below

VMware Carbon Black EDR | Documentation (elastic.co)

Use Logstash to stream logs with pipeline transformations via DCR-based API | Microsoft Learn